HTTPS sites whose certificate chains use SHA-1 and are valid past 1 January 2017 will no longer appear to be fully trustworthy in Chrome’s user interface.

Root is not checked

http://sha1affected.com/

Related: Study_Security_TLS Study_Security_TLS_Compatibility

参考资料

[1]. http://googleonlinesecurity.blogspot.com/2014/09/gradually-sunsetting-sha-1.html
[2]. https://community.qualys.com/blogs/securitylabs/2014/09/09/sha1-deprecation-what-you-need-to-know
[3]. https://www.digicert.com/sha1-sunset/
[4]. https://cabforum.org/baseline-requirements-documents/
[5]. https://support.google.com/chrome/answer/95617?hl=en
[6]. http://blogs.technet.com/b/pki/archive/2013/11/12/sha1-deprecation-policy.aspx
[7]. http://unmitigatedrisk.com/?p=474